jerryshao commented on PR #12757:
URL: https://github.com/apache/gravitino/pull/12757#issuecomment-5813569045

   Here are several open questions:
   
   1. How to deal with privileges defined both with RBAC and TBAC? Which takes 
precedence, and how do we handle conflicts?
   2. Tags have inheritance, and our RBAC system has inheritance too (SELECT 
TABLE on the catalog will automatically inherit the privileges). Will these two 
inheritance models conflict? Will this increase the complexity of calculating 
the privileges when authorizing?
   3. Will this TBAC bring in any privilege leakage issue or any unexpected 
corner case?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to